Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
File:                     3C2CE992BF9111F0AC4B384FC4F9AE02.roa (raw, json)
Hash identifier:          VAzIFnBXQqt6Ct1dKnumoM0KsxcHMmo8Zlmko8kqK/s=
Subject key identifier:   5A:5A:AD:D4:F7:FB:62:2E:A4:53:3E:47:93:62:29:B4:1F:48:78:97
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3BAB
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:24:28 +0000
ROA not before:           Thu 20 Aug 2026 16:24:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55002
IP address blocks:        103.209.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15275 (0x3bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:24:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a3c-5614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:4d:5b:c4:81:ac:da:39:f5:26:f9:a5:03:
                    e3:13:89:3d:ea:58:8b:9f:8f:6b:c8:f3:cc:d8:65:
                    c5:70:b6:5c:65:26:52:8f:fd:2a:82:12:8d:87:7b:
                    85:31:e4:f3:ea:88:c5:7b:f0:78:c3:f0:a6:4a:75:
                    00:97:e0:a1:73:de:82:cd:ca:9c:be:06:28:19:ef:
                    b8:51:89:b2:77:4a:31:99:fc:c5:ab:53:12:a6:fb:
                    4d:46:96:20:1b:d5:dd:8b:2c:27:d8:25:e8:17:73:
                    9e:0f:84:69:41:b8:d3:0f:0e:f2:3f:8e:15:ff:6b:
                    f9:e9:65:42:ef:68:41:2a:74:45:7a:23:0c:96:f5:
                    41:cd:11:47:f2:c9:4c:6a:02:34:bd:1e:79:26:3e:
                    91:02:b9:bb:a7:21:80:3e:05:46:ed:1b:a3:7a:3c:
                    75:c0:d1:6e:3f:c3:cb:93:40:69:25:f5:a4:7f:da:
                    92:a8:ea:eb:78:52:66:30:2e:77:7d:92:2d:7f:43:
                    a9:a8:57:4b:3d:e7:b2:b9:7e:55:4a:06:ac:db:17:
                    1c:5d:3e:35:b4:cc:a4:3c:a8:bc:f2:ab:07:b3:6b:
                    3c:99:ed:89:e6:d0:d7:4d:24:de:33:15:86:8c:01:
                    4f:8e:1c:ed:3a:a8:6f:3d:19:ef:f2:e0:07:29:97:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:AD:D4:F7:FB:62:2E:A4:53:3E:47:93:62:29:B4:1F:48:78:97
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:69:37:3f:2f:11:f3:28:2f:ad:de:f2:56:81:eb:b5:b4:7a:
         a6:cd:85:d3:45:30:d7:16:ff:f8:a0:54:3e:42:8f:ac:3e:6b:
         34:0e:ed:90:1d:b3:4d:2f:fa:0d:7a:a7:54:89:a3:51:26:5c:
         57:43:db:21:cb:3c:f6:17:c2:b1:f2:07:a6:a8:0a:1c:4a:6f:
         15:12:05:90:91:5b:ea:bc:88:ab:5c:88:94:88:3d:41:c6:44:
         87:11:d3:85:07:8e:d4:db:e4:22:9e:a1:4a:aa:09:bd:79:5a:
         ab:ad:b6:41:fe:20:35:0e:c3:c6:de:23:60:04:9c:47:a6:5f:
         c7:9f:c4:51:ea:42:52:eb:16:e6:1f:70:ba:ac:60:df:50:1b:
         82:d1:c7:97:3f:ea:7c:bc:8a:cf:d4:06:5d:f8:ad:37:a7:bb:
         93:e0:2c:0a:84:23:e2:f8:cf:5b:c8:7b:e2:0b:48:3a:70:03:
         7a:3b:32:52:ff:c1:56:49:09:3c:30:5a:ba:9a:03:dd:92:29:
         5e:9f:25:8a:72:ba:60:c3:7a:b0:9c:d2:27:21:97:47:7d:c4:
         6e:e1:90:3c:24:d8:4f:46:5f:d0:ca:06:d6:46:c6:55:f6:c9:
         2e:fa:ae:39:a4:fc:eb:0c:04:a3:65:5a:bc:63:ae:23:fc:9e:
         d0:5a:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:58:21 2026 by rpki-client